公开(公告)号：WO2022039999A1

公开(公告)日：2022-02-24

申请号：PCT/US2021/045644

申请日：2021-08-12

Applicant: CISCO TECHNOLOGY, INC.

Inventor： SEETHARAMAN, Venkatasubramanian ,  FAN, Chuanyun ,  ZHANG, Fanchen ,  TU, Jing ,  LEE, Abby, Huggins ,  KARABINAS, Thomas

IPC: G01R31/3185

Abstract: A method includes disconnecting a data bus connecting a test access port (TAP) controller of an integrated circuit (IC) chip to a plurality of test data registers deployed on the chip, simultaneously supplying test data to multiple test data registers among the plurality of test data registers, and storing test response data, received from the plurality of test data registers and responsive to the test data, in storage registers deployed on the chip.

公开(公告)号：WO2022031474A1

公开(公告)日：2022-02-10

申请号：PCT/US2021/043250

申请日：2021-07-26

Applicant: CISCO TECHNOLOGY, INC.

Inventor： RAO, Supreeth, Hosur, Nagesh ,  YADAV, Navindra ,  MALLESHAIAH, Prasannakumar, Jobigenahally ,  KUMAR, Ashok ,  ARUMUGAM, Umamaheswaran ,  PURANDARE, Darshan, Shrinath ,  LI, Songlin ,  HE, Hanlin

IPC: H04L29/06 ,  G06F21/57

Abstract: Systems, methods, and non-transitory computer-readable storage media are disclosed for detecting, identifying, and/or assessing hidden vulnerabilities in an enterprise network. In one example, a device may have one or more memories storing computer-readable instructions and one or more processors configured to execute the computer-readable instructions to receive vulnerability data of network components within an enterprise network. The vulnerability data can include identification of one or more vulnerabilities detected within the enterprise network. The device can then determine a vulnerability frequency and a machine frequency associated with each of the one or more vulnerabilities. The device can then determine a vulnerability score for each of the one or more vulnerabilities based on the vulnerability frequency and an inverse of the machine frequency, to yield a plurality of vulnerability scores. The device can then rank the one or more vulnerabilities based on the plurality of vulnerability scores.

公开(公告)号：WO2022015536A1

公开(公告)日：2022-01-20

申请号：PCT/US2021/040524

申请日：2021-07-06

Applicant: CISCO TECHNOLOGY, INC.

Inventor： GOERGEN, Joel Richard ,  JONES, Chad M. ,  COMPTON, Charles Lacey, III

IPC: H04L12/10

Abstract: In one or more embodiments, a system includes a plurality of network devices comprising a plurality of ports, a power bus connecting the network devices, wherein power is shared between the network devices over the power bus, and a controller for identifying available power and allocating power to the ports. The ports include a plurality of PSE (Power Sourcing Equipment) PoE (Power over Ethernet) ports each operable to transmit power to a device connected to one of the PSE PoE ports, a plurality of PD (Powered Device) PoE ports each operable to receive power from a device connected to one of the PD PoE ports, and a plurality of bi-directional PoE ports each configurable to operate as a PSE PoE port to transmit power to a device connected to one of the bi-directional PoE ports or as a PD PoE port to receive power from the connected device.

公开(公告)号：WO2022015492A1

公开(公告)日：2022-01-20

申请号：PCT/US2021/039402

申请日：2021-06-28

Applicant: CISCO TECHNOLOGY, INC.

Inventor： KAZMIERSKI, Mariusz

IPC: H04L12/709 ,  H04L12/803

Abstract: Systems and methods of creating and managing a multi-edge EtherChannel (MEEC) include, with a control node communicatively coupled to a plurality of edge nodes within a network, receiving including data defining a bundle of a plurality of links communicatively coupling the plurality of edge nodes and a first server and data identifying the first server. A map-notify message is sent to an edge node defining a link state for at least the first edge node. A map- proxy register message defining a plurality of link states for the plurality of the edge nodes within the bundle is sent to at least a second edge node to synchronize the first edge node with respect to at least the second edge node of the plurality of edge nodes. A map-reply message indicating load balancing data of a plurality of the edge nodes may be sent to an ingress edge node and data packets may be load balanced based on the load balancing data.

公开(公告)号：WO2022010730A1

公开(公告)日：2022-01-13

申请号：PCT/US2021/040075

申请日：2021-07-01

Applicant: CISCO TECHNOLOGY, INC.

Inventor： SUN, Yang ,  GAN, Zomin ,  WANG, Min ,  CHEN, Yepeng

IPC: H02M3/28 ,  H02J1/10 ,  H02M3/158

Abstract: A voltage regulator dynamically adjusts the voltage distribution on a voltage rail based on multiple feedback measurements. The voltage regulator provides electrical power to a voltage rail at multiple power supply locations along the voltage rail. The voltage regulator obtains voltage measurements from multiple voltage sensing locations on the voltage rail and detects a spatially unequal voltage deviation in the voltage rail. The voltage regulator adjusts the electrical power provided to the voltage rail at each of the power supply locations to compensate for the spatially unequal voltage deviation in the voltage rail.

公开(公告)号：WO2022010706A1

公开(公告)日：2022-01-13

申请号：PCT/US2021/039848

申请日：2021-06-30

Applicant: CISCO TECHNOLOGY, INC.

Inventor： GUPTA, Rohit, Dev ,  GAITONDE, Tilak ,  PAVITHRAN, Prashanth

IPC: H05K7/20

Abstract: A heat sink assembly (30) for a cage (18) for a field replaceable computing module (20) includes a heat sink (31), a thermal interface material, TIM (35), and an actuation assembly (170). The heat sink (31) includes fins (140) and a mating surface (133) positioned at a base (142) of the fins (140). The TIM (35) includes a first surface (135) that is coupled to the mating surface (133) of the heat sink (31) and a second surface (136) that is opposite the first surface (135). Thus, the second surface (136) can engage a heat transfer surface (22) of a field replaceable computing module (20) installed adjacent the heat sink (31). The actuation assembly (170) includes a rotational cam (174). When the rotational cam (174) is in a first position (P2), the second surface (136) of the TIM (35) contacts the heat transfer surface (22) of the computing module (20). When the rotational cam (174) moves to a second position (PI), the second surface (136) of the TIM (35) is moved a distance (G) away from the heat transfer surface (22) of the computing module (20).

公开(公告)号：WO2022010647A1

公开(公告)日：2022-01-13

申请号：PCT/US2021/038486

申请日：2021-06-22

Applicant: CISCO TECHNOLOGY, INC.

Inventor： WADHWA, Alok Lalit ,  FONTENOT, James Gabriel ,  KULSHRESHTHA, Ashutosh ,  YADAV, Navindra ,  GANDHAM, Shashidhar ,  ZENG, Weifei

IPC: H04L29/06 ,  G06F21/57

Abstract: Disclosed herein are methods, systems, and non-transitory computer-readable storage media for scoring network segmentation policies in order to determine their effectiveness before, during and after enforcement. In one aspect, a method includes identifying one or more applications within an enterprise network; identifying at least one network security policy in association with the one or more applications within the enterprise network; determining a score of the network security policy based on information corresponding to exposure of each of the one or more applications within the enterprise network; and executing the network security policy based on the score.

公开(公告)号：WO2022005746A1

公开(公告)日：2022-01-06

申请号：PCT/US2021/037556

申请日：2021-06-16

Applicant: CISCO TECHNOLOGY, INC.

Inventor： QUINN, Paul ,  MESTERY, Kyle Andrew Donald

IPC: H04L29/12 ,  H04L29/08 ,  H04L61/1511 ,  H04L67/1002 ,  H04L67/141

Abstract: Techniques for policy-based connection provisioning using Domain Name System (DNS) requests are described herein. The techniques may include receiving policy data associated with one or more headend nodes that manage connections to computing resources. Additionally, the techniques may include receiving a DNS request from a client device to establish a connection between the client device and a first headend node of the one or more headend nodes. The DNS request may include an attribute associated with the client device. A provisioning service may determine that the connection should be established between the client device and the first headend node based at least in part on evaluating the attribute with respect to the policy data. Additionally, the techniques may include sending an internet protocol (IP) address, which is associated with the first headend node, to the client device to facilitate establishment of the connection.

公开(公告)号：WO2021252454A1

公开(公告)日：2021-12-16

申请号：PCT/US2021/036346

申请日：2021-06-08

Applicant: CISCO TECHNOLOGY, INC.

Inventor： LIU, Xin ,  GUPTA, Sunil ,  NGO, Thanh Trung ,  BUI, Xuan Loc ,  NGUYEN, Hoang Viet ,  GANDHAM, Shashi ,  YADAV, Navindra

IPC: G06F9/50 ,  G06F11/3409 ,  G06F2201/84 ,  G06F9/45558 ,  G06F9/5011

Abstract: Systems, methods, and computer-readable for defining host functionalities in a computing environment include obtaining two or more snapshots comprising information pertaining to two or more processes executing in two or more hosts, the two or more snapshots being obtained at two or more points in time from the two or more hosts. One or more long-running processes amongst the two or more processes are identified based on one or more criteria associated with long-running processes. One or more priorities associated with the one or more long-running processes and used for defining functionalities for at least a subset of the two or more hosts, where high priorities are assigned to long-running processes, such as web server or database server processes, which are unique to at least the subset of the two or more hosts. Resources may be provisioned based on these host functionalities.

公开(公告)号：WO2021231063A1

公开(公告)日：2021-11-18

申请号：PCT/US2021/028802

申请日：2021-04-23

Applicant: CISCO TECHNOLOGY, INC.

Inventor： MESTERY, Kyle, Andrew, Donald ,  TOONK, Andree ,  LALANI, Rahim ,  WELLS, Ian, James

IPC: H04L29/08 ,  H04L29/06 ,  H04L12/707

Abstract: Techniques for load balancing communication sessions in a networked computing environment are described herein. The techniques may include establishing a first communication session between a client device and a first computing resource of a networked computing environment. Additionally, the techniques may include storing, in a data store, data indicating that the first communication session is associated with the first computing resource. The techniques may further include receiving, at a second computing resource of the networked computing environment, traffic associated with a second communication session that was sent by the client device, and based at least in part on accessing the data stored in the data store, establishing a traffic redirect such that the traffic and additional traffic associated with the second communication session is sent from the second computing resource to the first computing resource.